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Abstract 

The optimal space complexity of consensus in shared memory is a decades-old open problem. For 
a system of n processes, no algorithm is known that uses a sublinear number of registers. However, the 
best known lower bound due to Fich, Herlihy, and Shavit requires ^l{y/ri) registers. 

The special symmetric case of the problem where processes are anonymous (run the same algorithm) 
has also attracted attention. Even in this case, the best lower and upper bounds are still and 

0{n). Moreover, Fich, Herlihy, and Shavit first proved their lower bound for anonymous processes, and 
then extended it to the general case. As such, resolving the anonymous case might be a significant step 
towards understanding and solving the general problem. 

In this work, we show that in a system of anonymous processes, any consensus algorithm satisfying 
nondeterministic solo termination has to use H(n) read-write registers in some execution. This implies 
an H (n) lower bound on the space complexity of deterministic obstruction-free and randomized wait-free 
consensus, matching the upper bound and closing the symmetric case of the open problem. 


1 Introduction 

The celebrated Fischer, Lynch and Paterson (FLP) [FLP85] result proved that fundamental synchronization 
tasks including consensus and test-and-set are not solvable in a wait-free manner using read-write registers. 
However, the work of Ben-Or [B083] shows that it is possible to circumvent FLP and obtain efficient 
distributed algorithms, if we relax the problem specification to allow probabilistic termination. It is also 
possible to solve these tasks deterministically, but obstruction-free instead of wait-free; it is known how 
to convert any deterministic obstruction-free algorithm into a randomized wait-free algorithm against an 
oblivious adversary (see [GHHW13]). 

The space complexity of an algorithm is the maximum number of registers used in any execution. A lot 
of research has been dedicated to improving the upper and lower bounds on the space complexity for canon¬ 
ical tasks. For test-and-set, an H(logn) lower bound was shown in [SP89] and independently in [GW12]. 
On the other hand, an 0{^/n) deterministic obstruction-free upper bound was given in [GHHW13]. The fi¬ 
nal breakthrough was the recent obstruction-free algorithm designed by Giakkoupis et al. [GHHW14], with 
O(logn) space complexity, essentially closing the problem*. 

For consensus, an upper bound with n registers was long known from [AH90]. A lower bound of 
0(-y/n) by Fich et al. [FHS98] first appeared in 1993. The proof is notorious for its technicality and utilizes 
a neat inductive combination of covering and valency arguments. Another version of the proof appeared in 
a textbook [AE14]. However, a linear lower bound or a sublinear space algorithm has remained elusive to 
date. 

The authors of [FHS98] conjectured a tight lower bound of Q{n). But the linear lower bound has not 
been proven even in a restricted, symmetric case, where all processes are anonymous. In such a system 
processes can be thought of as running the same code: all processes with the same input start in the same 
initial state and behave identically. The same linear upper bound holds for anonymous processes, since a 
deterministic obstruction free consensus algorithm that uses 0{n) registers is known [GR05]. Interestingly, 
the proof in [FHS98] starts by showing the Q{y/n) lower bound for anonymous processes, which is then 
extended to a much more complex argument for the general case. Therefore, a linear lower bound in the 
anonymous setting might prove to be a meaningful step in better understanding and solving the general case 
of the open problem. 

Contribution. In this paper we prove the Q,{n) lower bound in the symmetric (anonymous) case for con¬ 
sensus algorithms satisfying the standard nondeterministic solo termination property. Any lower bound 
for algorithms satisfying the nondeterministic solo termination implies a lower bound for deterministic 
obstruction-free and randomized wait-free algorithms. As in [FHS98, AE14], the bound is for the worst- 
case space complexity of the algorithm, i.e. for the number of registers used in some execution, regardless 
of its actual probability. 

Our argument relies on a specific class of executions which we call reserving, and on the ability to 
define valency, corresponding fo possible refum values, for fhese executions. This definilion of valency 
and fhe abilify fo cover registers wifh modified confenfs by reserved processes greafly simplifies fhe fask of 
performing an inducfive argumenf. We hope fhaf fhese techniques will be useful for fulure work. 

We also demonsfrafe how fhe lower bound can be extended fo a non-anonymous, adapfive, seffing where 
processes come from a very large namespace and fhe bound depends on fhe size of fhe subsef of processes 
fhaf acfually participate in fhe execufion. However, fhis exfension requires additional resfricfions on regisfer 
size and ferminafion, and is provided mainly fo illusfrafe an approach. 

Definitions and Notation. We use the standard shared-memory model and similar notation to [EHS98, 
AE14]. We consider anonymous processes and atomic read-write registers. A process is covering a register 
R, if the next step of p can be a write to R. A block write of a set of processes P to a set of covered registers 

*The space complexity of randomized test-and-set against a strong (adaptive) adversary remains open. 
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y is a sequence of write steps by processes in P, where each step is a write to a different register and all 
registers get written to. 

In a system of anonymous processes, if a process p in state s performs a particular operation, for any 
configuration with any process q in the same state s, q can also perform the exactly same operation. Finally, 
if p and q perform the same operation from the same state with the same outcome (i.e. read the same value), 
then both p and q end up in the same state after the operation. In the context of randomized algorithms, 
anonymous processes always perform the same operation from the same state (including flipping coins with 
the same random distribution), and end up in identical state if they observe the same results. 

A clone of a process p, exactly as in [FHS98, AE14], is defined as anofher process wifh fhe same inpuf 
as p, fhaf shadows p by performing fhe same operafions as p in locksfep, reading and writing fhe same values 
immediately after p, and remaining in fhe same slate, all fhe way unfil some write of p. Because fhe system 
consisls of anonymous processes, in any execufion wifh sufficienlly many processes, for any wrife operation 
of p, fhere always exisls an alternative execufion wifh a clone q fhaf shadowed p all fhe way unfil fhe wrife. 
In particular, in fhe alternative execufion, process q covers fhe regisler and is abouf lo write fhe value fhaf p 
lasf wrote fhere. Moreover, fhe Iwo execufions wifh or wilhoul fhe clone covering fhe register are complelely 
indistinguishable fo all processes ofher fhan fhe clone ilself. 

An execution is a sequence of steps by processes and a solo execution is an execufion where all sfeps are 
faken by a single process. An execufion inferval is a subsequence of consecutive sfeps from some execufion. 
In fhe binary consensus problem each parficipafing process sfarfs wifh a binary inpuf 0 or 1, and musl relum 
a binary oufpul. The correclness criferium is fhaf all oufpufs musl be fhe same and equal fo fhe inpuf of some 
process. We say fhaf an execufion interval decides 0 (or 1) if some process relurns 0 (or 1, respecfively) 
during Ihis execufion inferval. 

A wail-free termination requirement means that each participating process must eventually return an 
output within a finite number of own steps, regardless of how the other processes are scheduled. The FLP 
result shows that in the asynchronous shared memory model with read-write registers, no deterministic 
algorithm can solve binary consensus in a wait-free way. However, it is possible to deterministically solve 
obstruction-free consensus, i.e. when processes are only required to return an output if they run solo from 
some configuration. It is also possible to solve consensus in a randomized wait-free way, when processes are 
allowed to flip random coins and decide their next steps accordingly. A nondetenninistic solo termination 
property of an algorithm means that from each reachable configuration, for each process, there exists a 
finite solo execution by the process where it terminates and returns an output. We prove our lower bounds 
for binary consensus algorithms that satisfy this nondeterministic solo termination property, because both 
deterministic obstruction-free algorithms and randomized wait-free algorithms fall into this category. 

2 Space Complexity Lower Bound 

In order to demonstrate our approach, we start by presenting a different proof of the Q{^/n) space lower 
bound in the anonymous setting. It uses induction on the number of registers written during an execution, 
as opposed to induction on the tuple of sizes of pending block writes in [FHS98]. The proof also has an 
additional benefit that the use of covering and valency arguments is decoupled. As usual, we use covering 
to enforce writing to a new register, while a valency argument reminiscent of [FLP85] ensures that both 
decision values remain reachable by solo executions. 

Next, building upon this new argument, we prove an Q{n) space lower bound for consensus with non¬ 
deterministic solo termination in a system of anonymous processes. There are some significant differences, 
for instance, the execution is constructed in such a way that after a register is written to, it always remains 
covered. Moreover, valency is redefined to account for this specific class of executions. The rest is induction. 
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2.1 A Square-Root Lower Bound 

In this section, we define valency as follows. If there is a solo execution of some process returning 0 from a 
configuration, then we call this configuration 0-valent (and 1-valent if there is a solo execution of a process 
that returns 1). Solo termination implies that every configuration is 0-valent or 1-valent. Note that unlike the 
standard definition of valency, our definition allows the same configuration to be simultaneously 0 -valent and 
1-valent. We call such configurations that are both 0-valent and 1-valent bivalent, and univalent otherwise. 
Notice that a configuration is bivalent if two solo executions of the same process return different values. If a 
configuration is 0 -valent, but not 1 -valent (i.e. no solo execution from this configuration decides 1 ), then we 
call it 0-univalent, meaning that the configuration is univalent with valency 0. Analogously, a configuration 
is 1 -univalent if it is 1 -valent but not 0 -valent. 

Observe that if we have at least two processes, then in every bivalent configuration we can always find 
fwo disfincf processes p and q, such fhaf fhere is a solo execufion of p reluming 0 and a solo execulion 
of q reluming 1. This is because eilher Ihe configuralion is bivalenl because of solo execulions of disfincf 
processes, in which case we are done, or fwo solo execulions of some process relurn differenl values, in 
which case if suffices lo consider any terminating solo execulion of anolher process. 

For fhe system of anonymous processes, and a consensus algorilhm fhaf uses alomic read-wrile regislers 
and satisfies fhe nondeferminisfic solo lerminalion properly, we prove fhe following slalemenf by inducfion: 

Lemma 2.1. For r > 0, there exists a system of -y 2 anonymous processes, such that for any consensus 

algorithm, a configuration Cr is reachable by an execution Er with the following properties: 

• There is a set R of r registers, each of which has been written to during Er, and 

• the configuration Cr is bivalent. 

Proof The proof is by inducfion, wilh fhe base case r = 0. Our system consisls of fwo processes p and q, 
p slarls wilh inpul 0, q slarls wilh inpul 1, and Cq is fhe initial slale. Clearly, no registers have been written 
lo in Cq and bivalency follows by nondeferminisfic solo lerminalion. 

Now, lei us assume fhe inducfion hypolhesis for some r and prove if for r -|- 1. By fhe induction 
hypolhesis, we can reach a configuration Cr using -|- 2 processes. The goal is fo use anolher r 

processes and extend Cr to Cr+i, completing the proof since r -\- -\-2 = -|- 2 . 

As discussed above, because we have at least 2 processes and Cr is bivalent, there exists a process p and 
its solo execution a from Cr after which p returns 0 and a process q p and its solo execution /3 from Cr 
after which q returns 1.^ Recall that R is the set of r registers that were written to in execution Er. For each 
register in R, let a new process clone the process that last wrote to it all the way to covering the register 
poised to write the same value as present in the register in configuration Cr. 

Let us now apply the covering argument utilizing the clones. Consider execution ErayP, where 7 is a 
block write to R by the new clones. We know that process p returns 0 after Era. During its solo execution a, 
process p has to write to a register outside of R. Otherwise, the configuration after Eray is indistinguishable 
from Cr to process q as the values in all registers are the same, and q is still in the same state as in Cr. Hence, 
q will return 1 after ErU'yjd as it would after Erfd, contradicting the correctness of the consensus algorithm. 
Analogously, process q has to write outside of R during (5. Let a = a'wpa", where Wp is the first write of 
p outside the set of registers R, and let /3 = P'wg/d", with Wg being the first write outside of R. Let i be the 
length of yjd'wg and Bi be a prefix of jf3'wg of length i, for all possible 0 < i < i. 

Next, we use a valency argument to reach Cr+i. We show that either the configuration reached after 
Era'yP'wg, or one of the configurations reached after Eru'BiWp for some i, satisfies the properties necessary 
to be Cr+i. Clearly, we have used the right number of processes to reach any of these configurations and 
r -|- 1 registers have been written to while doing so, including R and the register written by Wp or Wg. Thus, 
we only need to show that one of these configurations is bivalent. 

^Alternatively one can say execution Era ends with p returning 0 and ErjS ends with q returning 1. 
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Assume the contrary. The configuration for f = 0 must be 0-univalent, since p returns 0 only through¬ 
out a", and we assumed that the configuration is not bivalent. Similarly, the configuration reached after 
Era''yl3'wq = Era'B^ is 1-univalent. It is univalent by our assumption and 1-valent as q running solo 
returns 1 through j3" {a' does not involve a write outside of R and q cannot distinguish from Erl3'wq(3"). 
Because the configuration reached after Ej-a'B^ is 1-univalent, any terminating solo execution of process 
p from that configuration must also return 1. In particular, every terminating solo execution that starts by 
p performing its next step Wp returns 1. So the configuration reached after Era'B^Wp must be 1-univalent: 
solo executions of p return 1 (some solo execution terminates due to nondeterministic solo execution), and 
it is univalent by our assumption (it is the same as configuration for i = £). Therefore, the configuration 
reached after E^a'BiWp is 0-univalent for i = 0 and 1-univalent for i = i. Hence, we can find a swifch- 
ing poinf for some i and i + 1, where fhe configuration X reached by E^a'BiWp is 0-univalenf, while fhe 
configuration Y reached by E^a'BiJ^iWp is 1-univalenf. Lef o be fhe exfra operation in Hj+i. 

Operation o is nof by p and may nof be a read or a wrife fo fhe same regisfer as Wp wrifes fo since p 
would nof distinguish befween X and Y and would refurn fhe same oufpuf from bofh configurafions fhrough 
the same solo execution, contradicting the existence of the different univalencies. Otherwise, operations Wp 
and o commute. Let cr be a terminating solo execution from Y by the process that performed operation o, 
where it returns 1 due to the univalency of Y. Also consider this process performing its next operation o 
from X. Since Wp and o commute, and o is not a read, the process cannot distinguish between the resulting 
configuration and Y and returns 1 through a as from Y. However, oa is a solo execution from X that 
returns 1, contradicting the 0-uni valency of X. The contradiction proves the induction step, completing our 
induction. □ 

Notice that for n processes. Lemma 2.1 directly implies the existence of an execution where Q{y/n) 
registers are written to, proving the desired lower bound. 

2.2 Linear Lower Bound 

Consider systems with n anonymous processes and an arbitrary correct consensus algorithm satisfying the 
nondeterministic solo termination property. We will assume that no execution of the algorithm uses more 
than n/20 registers (otherwise, we are trivially done), and prove that such an algorithm has to use H(n) 
registers, which completes the proof. For notational convenience, let us define m to be n/20. 

The argument in Lemma 2.1 relies on a new set of clones in each iteration to overwrite the changes 
to the contents of the registers made during the inductive step. This is the primary reason why we only 
get an Q,{^/n) lower bound. As the authors of [FHS98] also mention, to get a stronger lower bound we 
would instead have to reuse existing processes. In order to do so, these existing processes need to cover the 
registers in our inductive configurations (we must also ensure proper valency conditions on what they are 
about to write, but let us focus on the covering). Now, even if we reach such a configuration, during a solo 
execution interval of some process in the subsequent induction step, all the registers may get written to, and 
we would have to use all the covering existing processes to overwrite the changes. Therefore, in the next 
configuration, there is no way to guarantee that the existing processes would still cover various registers. 

This is the primary reason why we have to replace solo executions in the proof with a different class 
of executions that we call reserving. Intuitively, reserving executions ensure that for the registers that are 
written to, some processes are reserved to cover them. This way, we can have reserved processes cover 
the registers in subsequent inductive configurations. Notice that the definition of valency used in the proof 
of Lemma 2.1 was based on solo executions. Thus, we also redefine valency based on reserving executions. 

2.2.1 Reserving executions 

The following is a formal definition of a reserving execution interval. 
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Definition 2.2. Let C be some configuration reachable by the algorithm, and let P be a set of at least m + l 
processes. We call an execution interval 7 that starts from configuration C reserving/rom C by P if: 

• Every step in 7 is by a process in P. 

• At any time during the execution of y: if we let be the set of registers written to so far during 7 , 
then, for each register in Ryj, there is a reserved process p £ P covering that register, one per register. 

• If a process p ^ P returns during 7 then it does so in the last step of y. 

Notice that by definition any prefix of a reserving execution inferval is also a reserving execution inferval. 
Lef Res(C', P) be fhe sef of all reserving execution intervals from C by processes in P fhaf end wild a process 
p £ P reluming. We firsl show lhal given sufficienlly many processes, such an execution inferval exisls. 
This is essential for defining fhe valency lafer. Recall lhal we assumed a slricf upper bound of m on fhe 
number of registers lhal can ever be wrillen. 

Claim 2.3. For any reachable configuration C and a set of at least m + l processes P, none of which have 
returned yet, we have that Res(C', P) 0. 

Proof. For a given C and P, we will prove Ihe claim by conslrucling a particular reserving execution interval 
7 lhal ends when some process p £ P relurns. We slarl wilh an empty 7 and continuously extend it In Ihe 
firsl slage, one by one, for each process p £ P: 

• Due lo Ihe nondelerminislic solo termination, Ihere exisls a solo execution of p where p relurns. 

- If p ever writes lo any register during Ihis solo execution, extend 7 by Ihe prefix of Ihe execution 
before Ihis write, and move lo Ihe nexl process in P. 

- Olherwise, complete 7 by extending il wilh Ihe whole solo execution of p. 

We have finitely many processes and Ihe firsl slage described above consisls of extending Ihe execution 
interval al mosl |P| times. Each time, because of Ihe nondelerminislic solo termination for some process 
p £ P, we extend 7 by a prefix of a finite solo execution of p. Moreover, all operations are reads by 
processes in P, and Iherefore Ihe prefix of 7 conslrucled so far is reserving. 

If some process relurns in Ihe firsl slage, Ihe conslruclion of 7 is complete. Olherwise, since Ihe firsl 
slage is finite, we move on lo Ihe second slage described below. In Ihe configuralion after Ihe firsl slage each 
of Ihe al leasl m+l processes in P is covering a register (by Iheir nexl write operalion after Ihe firsl slage). 
From lhal configuration, Ihe execution interval 7 is extended by repeatedly doing Ihe following: 

1. Lei R be Ihe sel of covered registers by processes of P. Since |ii| < m < |P|, we can find Iwo 
processes p,q £ P covering Ihe same register in R. 

2. Due lo Ihe nondelerminislic solo lerminalion, Ihere exisls a solo execulion of p where p relurns. 

- If p ever writes lo a register oulside of R during Ihis solo execulion, extend 7 by Ihe prefix of 
Ihe execulion before Ihis write, and conlinue from Ihe firsl step. Notice lhal al Ihe beginning of 
Ihe nexl iteration, process p still covers a register as required. 

- Olherwise, complete 7 by extending il wilh Ihe whole solo execution of p. 

In Ihe second slage, each iteration terminates, since for any process p £ P, we can extend by al mosl Ihe 
terminating solo execution of p, which exisls and is finite. After each iteration, if Ihe conslruclion is nol 
complete, Ihe size of R increases by one. Bui Ihere are al mosl m registers in Ihe system and \R\ < m. 
Thus, after al mosl m finite extensions, we will complete Ihe conslruclion of 7 when some process relurns. 

The execulion is reserving because al all limes, Ihe registers lhal were wrillen-lo are in R. Moreover, for 
each register in R, Ihere is always a process covering il slarling from Ihe lime il was firsl covered by some 
process p in Ihe second step of some ileralion all Ihe way unlil Ihe end of 7 . □ 

The nexl claim follows immediately from Ihe definilion of reserving executions. 

Claim 2.4. Consider a reachable configuration C, a set of at least m + l processes P' none of which have 
returned yet, and another configuration C reached after some process p ^ P' performs a write operation 


5 



Wp in C. Moreover, assume that another process q ^ p with q ^ P' is covering the same register that Wp 
writes to. Then if^ G Res(C'', P'), then Wpj is in Res(C', P) where P = P' VJ {p'\ U {( 7 }. 

2.2.2 New definition of valency 

We say that a configuration C is 0-valent^ with respect to the set of processes U, if there exists a subset of 
at least m + 1 processes P C U and a reserving execution in Res(C', P) that finishes when some process 
in P refurns 0. We call C 0-valenf™^^ w.r.f. U, if fhere exisfs a subsef of exactly m + 1 processes P U 
(|P| = m + 1), and a reserving execufion inferval in Res(C', P) refuming 0. We define l-valenf[/ and 
l-valenf^"*"^ analogously. If U confains af leasf m + 1 processes fhaf have nof refumed, Claim 2.3 implies 
fhaf every configurafion is 0-valenf™"''^ or 1-valenf™"''^ (and fhus O-valenfr/ or l-valenfr/). 

As in our earlier definifion in Section 2.1, buf unlike fhe sfandard definifion, a configurafion fhaf is 0- 
valenf|^“'“^ can still also be 1-valenf™^^ in which case we call if bivalenf™^^. Basically, a configurafion 
is bivalenf^"''^ if if is bofh 0-valenf™^^ due fo some P C U and l-valenf™“'“^ due fo some Q C U. A 
configurafion fhaf is nof bivalenf™"'"^ is called univalenf™"'"^. Finally, similar fo our earlier convenfion, 
we define a configurafion fo be 0-univalenf^^"''^ if if is 0-valenf|^''“^ buf nof l-valenf™"’"^. On fhe ofher 
hand, a configurafion fhaf is l-valenf™“'“^ buf nof 0-valenf^“'“^ is called l-univalenf™"'"^. Terms bivalenff/, 
univalenf[/, 0-univalenf[/ and l-univalenf [7 are defined analogously. 

Nexf we prove a claim fhaf lefs us find reserving executions consisfing of disjoinf processes. 

Claim 2.5. Consider a configuration C which is bivalentjj w.r.t. U. Assume that there are (possibly in¬ 
tersecting) sets of at least m + 1 processes each P C U and Q C U such that \U\ > |P| + |Q|+m, 
and some reserving execution in Res(C, P) ends when p G P returns 0, while some reserving execution in 
Res(C', Q) ends when q G Q returns 1. Then there are also disjoint sets of processes P' G. U and Q' QU 
(P' CQ' = 0), such that an execution in Res(C', P') returns 0 and an execution in Res(C', Q') returns 1. 
Moreover, m + 1 < min(|P'|, |(5'|) < min(|P|, |(5|) and max(|P'|, |(5'|) < max(|Pl, |(5|). 

Proof None of fhe processes in U may have already refurned in configuration C, as fhaf would confradicf 
the existence of a reserving execution returning the other output. If P and Q do not intersect then we set 
P' = P and Q' = Q. Otherwise, we can find asefP C[/ — P — Qofm + 1 processes. By Claim 2.3, 
Res(C', H) is non-empfy, and wifhouf loss of generalify, some execufion in Res(C', H) refurns 0. Then, we 
sef P' = H and Q' = Q (if all executions in Res(C', H) ref urn 1, we would sef P' = P and Q' = H). □ 

2.2.3 The process-clone pairs and the proof 

As mentioned earlier, if is obviously nof sufficienf fo simply cover regisfers wifh exisfing processes wifhouf 
any knowledge of whaf fhey are abouf fo wrife. In fhe proof of Lemma 2.1 we used new clones fhaf covered 
regisfers fo block-overwrife fhese regisfers back fo fhe confenfs whose valency we knew. In order fo do 
somefhing similar wifh exisfing processes, we associafe a dedicafed clone fo each process. The process and 
ifs clone remain in fhe same sfafes and perform fhe same operations during fhe whole execufion. 

Usually, when we schedule a process fo perform an operafion, ifs clone performs fhe same operation 
immediafely affer fhe process. Thus fhe pair of fhe process and fhe clone remain in fhe same sfafe. Under 
fhese circumsfances, we can freaf fhe pair of fhe process and ifs clone as a single process, because no process 
can disfinguish fhe execufion from when fhe clone would nof fake sfeps. However, sometimes we will split 
the pair by having only the process perform a write operation and let the clone cover the register. We will 
explicitly say when this is the case. After we split the pair of process and clone in such a way, we will not 
schedule the process to take any more steps and thus the clone will remain poised to write to the covered 
register. After some delay, we will schedule the clone of the process to write, effectively resetting the register 
to the value it had when the process wrote. Moreover, because meanwhile the process did not take any steps, 
after the write the clone will again be in the same state as its associated process. Hence the pair of the 
process and clone will no longer be split, and will continue taking steps in sync like a single process. 
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This is different from the way clones were used in the proof of Lemma 2.1, because after the pair of 
the process and its clone is united, it can be split again. Therefore, the same clone can reset the contents of 
registers written by its associated process multiple times, instead of requiring a new clone every time. 

We call a split pair of a process and a clone, fresh as long as the register that the process wrote to, and its 
clone is covering, has not been overwritten. After the register is overwritten, we call the split pair stale. 

In addition, we also use cloning in a way similar to the proof of Lemma 2.1, except that we do this 
at most constantly many times, as opposed to r times, to reach the next configuration Cr+i- Moreover, 
each time when we do this, we create duplicates of both the process and its corresponding clone. This new 
process-clone pair is in the same state as the original pair, and from there on behaves like a single new 
process similar to all other pairs. We will always consider valency with respect to sets of processes whose 
pairs are not split. Therefore, the definition of valency does not need to change when the clones keep taking 
steps immediately after their processes. 

Sometimes, when considering process-clone pairs, none of which are split, we may refer to them as 
processes, i.e. we may talk about a process taking steps or returning a value. As mentioned earlier, it is 
assumed that as long as the pair is not split, the clone always follows and takes the same steps right after the 
process. Hence, in this context, a process taking a step means a pair taking a step. 

Now we are ready to prove the main result. 

Theorem 2.6. In the system of anonymous processes, consider any correct consensus algorithm satisfying 
nondeterministic solo termination, with the property that every execution uses at most m registers. For each 
r with 0 < r < m, there exists a set U containing 5m -|- 6 -|- 2r process-clone pairs such that a configuration 
Cr is reachable through an execution Er by processes and clones in U with the following properties: 

1. There exists a set R ofr registers, that can be partitioned in two disjoint subsets R = RgU Rc, where: 

— Rs consists of all registers in the system that each have one fresh split pair on them, last written 
by some process whose clone has not yet performed the write and is covering the register. 

— Rc = R — Rs. Each register in Rc is covered by an unique pair of both a process and its clone. 
Thus, each fresh pair is split on a different register in Rg, and an additional \Rc\ pairs are covering 
the registers in Rc. Let V be the set of these |i?s| -|- |iic| = f pairs. 

2. There are at most r stale split pairs in the system, that are all split on pairwise different registers from 
R. Let L be the set of these at most r stale split pairs. 

3. There exist disjoint sets of process-clone pairs that are not split P,Q C U — V — L with |P| -|- \ Q\ < 
2m -F 4, such that an execution in Res(C'r, P) returns 0 and an execution in Res(C'r, Q) returns 1.^ 

Proof. The proof is by induction on r, with the base case r = 0. Out of the 5m + 6 processes-clone pairs, 
half of them start with an input 0 and half start with an input 1. We let Co be the initial state, P be a set of 
some m -|- 1 pairs with input 0, and Q be a set of some m -|- 1 pairs with input 1. The first two properties are 
trivially satisfied; also P Fi Q = 0 and |P| -|- \Q\ = 2m + 2. By Claim 2.3 and correcfness of consensus, 
fhere is a reserving execution in Res(Co,P) thaf decides 0, and a reserving execution in Res(Co,<5) thaf 
decides 1 (Cq is bivalenf^/). Observe fhaf fhe pairs are nof splif and for fhe purposes of valency we can jusf 
consider fhe sfeps of processes. 

Now, lef us assume induction hypofhesis for some r, i.e. fhe exisfence of and Cr wifh fhe required 
fhree properfies, and prove fhe sfep for r -|- 1 by exfending Er to Er+i, resulting in the configuration Cr+i. 
Let U, P, Q, V, L and R = Rg U Rc all be defined as in fhe fheorem sfafemenf for r. Our goal is fo 
consfrucf sefs U', P', Q', V, L' and R' = R'^ U for r -|- 1. In [/' — C we have fwo more process-clone 
pairs available fhaf have nof faken sfeps and can be used fo clone an existing process-clone pair. Lef T 
denofe U — V — L — P — Q. Since \V\ = r, L < r and |P| -|- |Q| < 2m F 4, we have |r| > 3m -|- 2. 

^The pairs of processes in P and Q are not split, because all split pairs belong to L U L (fresh to V and stale to L). Also, the 
third condition implies that the configuration Cr is bivalent( 7 _v_i,. 
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For all but |i?s| + \L\ split pairs both processes and clones are in the same states, about to perform the 
same operations. By definition, each stale pair in L is split on a different register from R. In the following 
argument, we extend the execution from Er to Er+i by steps of processes and clones not in L. This can 
introduce new stale split pairs and the resulting configuration Cr+i may not immediately satisfy the second 
property. We will then show how to modify the extension and unite some stale split pairs, such that the 
resulting configuration satisfies all properfies, including fhe second properly wifh fhe new L'. 

Lei a G Res(C'r, P) be the reserving execution interval that returns 0, and let /3 G Res(C'r, Q) be the 
reserving execution interval that returns 1. Notice that each time a process in P or Q takes a step in a or 
/3, its clone performs an identical step immediately after. The execution E^-a ends with a process-clone pair 
p ^ P returning 0 and the execution Erf3 ends with a process-clone pair q G Q returning 1. 

Each register in Rc was covered by some pair of both a process and its clone in V. Let 7c be a block 
write to all registers in Rc by only the processes but not the clones of these respective covering pairs: i.e. 
after each write we get a new fresh split pair. Consider a configuration D reached from Cr by executing 
this block write, i.e. a configuration reached after Assume that D is l-valent™"'"^, without loss of 

generality, because it has a valency. For any execution interval e, let us denote by W (e) the set of registers 
written to during e. Hence, Rsf\W (e) is the set of registers in Rg that are written-to during e. Each register 
in Rg is covered by a clone of a split pair whose process has already performed the write and is stopped. 
Define 7 s (e) as a block write lo all regisfers in H VF(e) by fhese frailing clones of fhe splif pairs in V: 
i.e. after each wrife anofher clone cafches up wifh ifs process and a previously splif pair is united. Basically, 
if we run an execufion interval e from Cr thaf changes confenfs of some regisfers in Rg, we can fhen clean 
these changes up by executing 7s (e), which leads to all registers in Rg having the same contents as in Cr- 

Using a crude covering argument we can first show that 

Claim 2.8. The execution interval a must contain a write operation outside R. 

Based on this we can write a = a'wpa", where Wp is the write operation to a register reg 0 R, performed 
by some process-clone pair p G P. 

Looking ahead, when we reach Cr+i-, the new set of registers R' will be P U {reg}. Next, we prove the 
following claim using an FLP-like case analysis: 

Claim 2.9. We can extend execution Er (i.e. from Cr) with an execution interval e and reach a configuration 
satisfying the first and the third inductive requirements to be Cr+i with a properly defined U', P', Q', V 
and P' = P^ U R'c, and with all process-clone pairs that are not split being in sync. But the second property 
is not immediately satisfied. All stale split pairs from L remain stale and split, but some pairs that were fresh 
and split on registers in Rg n W{e) may have become stale in Cr+i {because neither the process nor the 
clone in the split pair has taken steps while the register was overwritten in e). However, these are the only 
possible new stale split pairs in C^+i. tind they do not belong to the new sets V VJ P' U Q'. 

The proofs of these claims are provided later. In order to finish fhe proof of fhe fheorem, we need fo 
show how fo consfrucf L' . According fo the above Claim 2.9 we can extend the execution to reach the next 
configuration Cr+i satisfying first and third but not the second property about the stale split pairs L' . In 
Cr we had at most r stale pairs in the system, each split on a different register, and L was the set of these 
pairs. But on the way to reaching Cr+i, we may have introduced new stale pairs in the system. According 
to Claim 2.9 these must be the pairs that were fresh and split on registers in P^ n IF(e) in Cr, and whose 
associated register in Rg has been overwritten during e, making them stale in Cr+\. 

The set of all stale pairs in Cr+i may not satisfy the requirements imposed for L', since there could 
already have been a stale pair split on a register in P^ n IF (e) in L (in Cr). Then two stale pairs would be 
split on this register in Cr+i, violating the second property. However, for each such register in P^ n IF (e), 
we know a stale pair p G L was split on it in Cr, and that this register was written-to during extension IF (e). 
We now modify the extension e; we add a single write by the clone of the stale split pair p immediately 


before a write operation to the same register that was already in e. This way, no pair other than the clone 
of p observes a difference between the two executions, and we will use the configuration reached by the 
modified execution as Cr+i- Because of this indistinguishability, the new Cr+i still satisfies other required 
properties. Moreover, the pair p is not split anymore; it is united since the clone has caught up with its 
process. 

We can do the above modification to the execution for each register mRsf\W (e) that previously ended 
up with two stale split processes in Cr+i- Let the modified execution extension be e' . In e' , some stale split 
pairs from L are united, indistinguishably to all other processes and clones, leading to a configuration Cr+i, 
that still satisfies the first and third properties, and has at most one stale pair split on any register. We take L' 
to be the set of stale split pairs. By construction, all stale pairs are split on registers in R' and no two on the 
same register, so we do have \L'\ < r + 1 as desired. Hence, we have reached configuration satisfying 
all properties and completing the proof. □ 

Corollary 2.7. In a system ofn anonymous processes, any consensus algorithm satisfying non-deterministic 
solo termination must use H(n) registers. 

Proof. Theorem 2.6 directly implies the H(n) lower bound on the number of registers used in some exe¬ 
cution. If n is the number of anonymous processes and no execution uses more than m = n/20 registers, 
by Theorem 2.6 we can reach Cm for large enough n, and we have enough processes n > 10m + 12 + 4m. 
In Cm there are m registers in R, each of which has either already been written-to {Rs) or are covered by 
unique processes (i?c)- We could perform a block write to Rc by covering processes from V in Cm, after 
which in the resulting execution m = n/20 = Q(n) different registers would have been written to. □ 

We now provide the delayed proofs for the claims. 

Claim 2.8. The execution interval a must contain a write operation outside R. 

Proof. Assume the contrary. We know that the execution E^a decides 0. No process or clone that takes a 
step in 7 c or 7 s (a) appears in a (they belong to V, disjoint from P and Q), and by definition, no process or 
clone from T takes a step in a, 7 c or 7s (a)- Thus, to all processes (and clones) in T, the configurations after 
£^c 07 s(«) 7 c and after E^yc, which is configuration D, are indistinguishable. This is because no process 
(or clone) in T has taken steps, the registers in R contain the same values, and other registers were not 
touched during a, 7s(a) or 7 c. Configuration D is 1-valent™^^, so some extension from Erajs{o()jc by an 
execution interval from Res(Zl, T) decides 1. This contradicts the correctness of the algorithm. □ 

Claim 2.9. We can extend execution E^ (i.e. from Cr) with execution interval e and reach a configuration 
satisfying the first and the third inductive requirements to be Cr+i with properly defined U', P', Q', V' and 
R' = R'gU R'^, and with all process-clone pairs that are not split being in sync. But the second property is 
not immediately satisfied. All stale split pairs from L remain stale and split, but some pairs that were fresh 
and split on registers in Rg H W{e) may have become stale in Cr+i (because neither the process nor the 
clone in the split pair has taken steps while the register has been overwritten in e). However, these can be 
the only new stale split pairs in Cr+i and they do not belong to the new sets V' \J P' Q'. 

Proof. The proof works by case analysis. We use the notation from Theorem 2.6. T does not contain any 
split pairs, so we can consider valency with respect to processes in T. 
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Figure 1: Case 1 
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Case 1: the configuration reached hy the execution Era' is 1 -valent™"''^: Let £ be the length of Wpa" 
and Aj be a prefix of Wpa" of size j for 0<j<£. Here we consider steps of process-clone pairs from P, 
i.e. the difference between Aj and Aj^i is the same operation performed twice by a process and its clone, 
and I counts these couples of identical operations, as illustrated in Figure 2.2.3. Pairs in P are not split, as 
by the inductive hypothesis only pairs in C U L are split, and {V L) L) D P = 0. 

We consider two further subcases. 

Case 1.1: for some 0<j<£, the configuration reached hy the execution Era' Aj is hivalenty"''^: In 

this case, we let Cr+i be precisely the configuration reached by Er+i = Era' Aj, and let R' = RVJ {reg}. 
Clearly, |i?'| = r -|- 1. Moreover, since Cr+i is bivalent™"''^ there are two subsets of m -|- 1 process-clone 
pairs in T and respective reserving execution intervals from Cr+i that return 0 and 1. Since |r| > 3m -|- 2, 
by Claim 2.5, we can actually find P' 0 T and Q' C T, wifh P' Cl Q' = 0 and |P'| = IQ'I = m -t- 1, such 
fhaf an execution in Res(Cr+i, P') refurns 0 and an execution in Res(Cr+i, Q') refurns 1. These sefs P' and 
Q' are fhe new sefs of pairs for Cr+i, and as required |P'| -|- \Q'\ = 2m A 2 < 2m -|- 4. 

The new sef R'g will be Rg — {Rg n W{a'Aj)), i.e. fhe regisfers from Rg fhaf have nof been touched 
during our execution exfension a' A j from Cr to Cr+i- For each of these registers we still have the same 
one pair from V split on it, and since this pair was fresh in Cr and the register has not been written to during 
the extension, it is still fresh in Cr+i as required. There are no other fresh split pairs in Cr+i'. no new split 
pairs were introduced during the extension, and the rest of fresh pairs in Cr were split on Rg n a'Aj. These 
pairs are not fresh in C^+i, as their register was written to during the extension. 

The set R'^. is simply (R U {reg}) — R'g = Rc0 {Rs H W[a'Aj)) U {reg}. We must show that there is 
a unique process-clone pair covering each of these registers. For each register in Rc, we take the same pair 
from V that was associated and covering it in Cr- For each register in {Rg n W{a'Aj)) U {reg}, we find a 
unique pair from P covering if in Cr+i- Since a is a reserving execufion inferval from Cr, all ifs prefixes 
including a'Aj are also reserving. Thus, in Cr+i for each register fhaf has been ever wriffen to during a'Aj, 
in particular for registers in {Rg n W{a'Aj)) U {reg}, we find and associate a unique covering pair in P. 
Technically, if j = 0, register reg is nof yef written, buf fhe nexf operafion in a is Wp by a pair covering reg. 

The sef V confains all r -|-1 pairs fhaf we associafed wifh regisfers in R', so C 1/ U P. The number of 
sfale splif pairs may have increased, however. We still have pairs in L plus \Rs0W {a' Aj) \ o£ fhe previously 
fresh pairs fhaf are now sfale. We deal wifh fhis in Theorem 2.6 by modifying fhe execufion exfension fo 
unife some sfale pairs from L, leaving us wifh a desired subsef L' of af mosf r -|- 1 sfale pairs. 

Finally, as P', Q' C T, and T was disjoin! from V, P, Q and L, {P' U Q') H {V' U L') = 0 as required. 
Case 1.2: for every 0 < j < £, the configuration reached by the execution Era'Aj is univalent™^^: 
By Case 1 assumption Era'A q is l-valenf™"'"^, so if musf be l-univalenf^"'"^. On fhe ofher hand, a ends 
wifh a process (and ifs clone) reluming 0, so fhe configuralion reached by Era'Ai musf be 0-univalenl^"'"^. 
No inlermediale configuration is bivalenl, so we can find a 0 < j < £ such fhaf Era' Aj leads to a 1- 
univalenl™"'"^ configuration and Era' Aj j^i leads fo a 0-univalenl™^^ configuration. We lake Cr+i to be the 
configuration reached after Er+i = Era' Aj, and define sefs P}, R'g, V' and L' fhe same way as if Cr+i 
was bivalenl in Case 1.1. This still works, buf we need a new way to find P' and Q' wifh desired properties. 

Lei o be fhe operafion by a process-clone pair in P separafing Aj and Aj^i- o may nof be a read. 
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as no process (or clone) in T can distinguish between configurations after Ero'Aj or Era'AjO, making it 
impossible for these configurations to have different univalencies w.r.t. to T. Let Q' be a set of any m + 1 
pairs in T. By Claim 2.3, Res(C'r+i, Q') is non-empty and since Cr+i is 1-univalent™"''^, all executions in 
Res(C'r+i, Q') return 1. Recall that U' is U plus two process-clone pairs that have not taken any steps, so 
that \U'\ = |?7| -f 2 < 5m -|- 6 -|- 2(r -|- 1). Let us use these process-clone pairs to create two duplicates of 
the process-clone pair performing the write operation o. Both of these new pairs will be in the same state 
as the original pair performing o. These duplicate processes (and their clones) are thus poised on the same 
register about to perform write operations o' and o" identical to the operation o at configuration Cr+i- 

Recall that |r| > 3m -|- 2 and let F be a set of m -|- 1 pairs from T — Q'. Let P' be the union of F and 
the two new duplicate pairs, |P'| = m -|- 3 in total. Let O be the O-univalent™"''^ configuration reached after 
Eru'Aj+i = Ero'AjO = Er+io. Due to 0-univalency, there is a reserving execution ^ G Res(0,F) that 
returns 0. Having one duplicate pair perform o' from Cr+i while another covers the same register with the 
same operation o", we reach the state indistinguishable from O for all m -|- 1 pairs in F. Thus, execution 
o'^ from Cr+i returns 0, and by Claim 2.4, o'^ G Res(Cr+i, P'). By construction |P'| -|- \Q'\ = 2m -|- 4 
and P' r\Q' = 0, as desired and the intersection of P' and Q' with V or L' is empty like in Case 1.1. 

The remaining case is when the configuration reached by the execution Era' is O-univalent™"''^. It is a 
bit more involved but utilizes the same general ideas and techniques. One difference is that we also split 
pairs. The construction is given in Appendix A. □ 

3 Extensions 

Adaptive Lower Bound: Let us sketch a proof for an adaptive linear lower bound on the space complexity 
of consensus for non-anonymous processes but under extra restrictions on register size and solo termination. 
In this setting, processes are no longer anonymous, but we assume they come from a very large namespace. 
Each of these huge number of processes executes its own code, however, we get to choose which subset of 
processes participates in the execution. We show that there is a linear space lower bound that depends on 
the number of participating processes, that is, for large enough namespace, we can find an execution of n 
processes (out of all processes) where Q.{n) registers get written. 

The restrictions are that the registers have a bounded size and that the consensus algorithm satisfies 
bounded nondeterministic solo termination property, meaning that there always is a terminating solo execu¬ 
tion of a process consisting of less than certain number of steps. If we had bounded nondeterministic solo 
termination, the lower bound execution for anonymous processes constructed in Theorem 2.6 would always 
contain less than B steps, where H is a finite bound that only depends on n and the solo termination bound. 
As registers have a bounded size, for both input values, a process can exhibit only finitely many different 
behaviors during its first B steps, because in each step it can either read or write a fixed number of different 
values. For a sufficiently large namespace (depending on B, n and register size), by pigeon-hole principle, 
we can find n processes such that half of them start with input 1, half start with 0 and all processes with the 
same input behave as anonymous for the first B steps of an execution. Hence, we can use Theorem 2.6 and 
get an execution where n/20 registers are written to, as described at the end of Section 2.2. 

Future Work: We believe that is should be possible to derive the above adaptive lower bound without 
the bounded solo termination assumption, and to get good estimate on the required size of the namespace. 
However, the major open problem is still to resolve the general, non-anonymous and non-adaptive case, i.e. 
to get tight bounds on the space required to solve consensus with exactly n asymmetric processes. 
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Figure 2: Case 2 



7. (o') 


A Last case of the proof of Claim 2.9 

The notation here is the same as in Theorem 2.6. In particular, we use the definitions of configuration D and 
execution intervals 7 c and 7s(a')- 

Case 2: the configuration reached hy the execution Era' is O-univalent™’*'^: Let D' be the configu¬ 
ration reached after executing Era'^sW)^c- Recall that in 7s(a0> the clones of split pairs overwrite all 
registers in Rg n W{a') with the values these registers had in Cr- Configuration D' is indistinguishable 
from the l-valent™"'"^ configuration D reached by Erjc for all processes and clones in T. This is because 
the processes (and clones) in T have not taken steps and the contents of all registers are the same in D and 
D' since a' contains writes only to registers in R. 

Let us denote by I the length of execution interval and let Bj be the prefix of this execution 

interval of size 0 < j < 1. Unlike the definition of A, when the difference between Aj and Aj+i was a 
“pair step,” i.e. two identical operations of the process and its respective clone, the difference between Bj 
and Bj^i is actually a single step, i.e. exactly one operation by either a process or a clone of some process. 
This is because by definition each of the steps in 7 s(a') is performed only by a clone (uniting a previously 
split pair after each operation), while each step in 7 c is performed only by a processes (creating a new split 
pair after each operation). This is illustrated in Figure A. 

Case 2.1: for some 0 < j < I, the configuration reached by the execution Ero'Bj is bivalent™^^: We 

let Cr+i be the configuration reached by Er+i = Era' Bj, and R' = RVJ {reg}, with |i?'| = r + 1. Since 
Cr-\-i is bivalent™^^ there are two subsets of process-clone pairs in T and respective reserving execution 
intervals from Cr+i that decide different outputs. By Claim 2.5, we can find P' C T and Q' C T, with 
P' DQ' = 0 and \P'\ = \Q'\ = m + 1, such that an execution in Res(C'r+i, P') returns 0 and an execution 
in Res(Cc+i, Q') returns 1. As in Case 1.1 these sets P' and Q' are the new sets of pairs for Cr+i- 

The new set R'^ is {Rg — {Rg n W {a'))) U {Rc H W (Bj)), consisting of registers from Rg not touched 
during a' and registers from Rc written to during the prefix of block write jc that was executed in Bj . For 
each register in Rg — {Rg n W{a')) we still have the same one pair from V split on it as in Cr- This split pair 
was fresh in Cr and since its register in Rg has not been written during the extension a'Bj (not written in 
a', and hence also not in 'jsiot') or 7 c), it is still fresh as required in Cr+i- New fresh split pairs are created 
during the execution of the prefix of 7 c in Bj, as only processes but not their clones take steps and after each 
write in 7 c we get a new fresh split pair. These pairs are split on registers mRc0W{Bj), and we associate 
exactly one new fresh split pair to each of these registers. No other split pairs are fresh, since fresh pairs that 
were split on Rg n a' cannot be fresh in Cc+i, as their registers were written to during a'. 

The set R'c is {R U {reg}) — R'g = {Rc — {Rc n W{Bj))) U {Rg n W{a')) U (reg). As in Case 1.1, 
a' is a prefix of a reserving execution interval a G Res(C',., P), so for each register m Rgf\W {a') we can 
find a unique covering process (and thus respective pair) from P in Cr+i- The register reg is covered by the 
process-clone pair in P with a pending write Wp. For each register in Rc — {Rc H W{Bj)), we take the pair 
from V that was associated and covering it in Cr- Neither process nor clone in this pair have taken any steps 
in a'Bj and are still covering the same register in Cr+i- 

The set V' contains all r -|- 1 pairs associated with registers in R', and V' C V U P. The number of 
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split stale pairs has again increased from L by at most \Rsf^W (a')| due to previously fresh pairs split on 
Rs^W {a') that may now be stale. Also, as in Case 1.1, {P' U Q') n {V' U L') = 0 as required. 

Case 2.2: for every 0 < j < I, the configuration reached by the execution Era'Bj is univalent™’*'^: 
This case is similar to Case 1.2. The configuration reached after Era'Bo is O-univalent™"''^ by the Case 2 
assumption and configuration D' reached after E^a'Bi must be 1-univalent™"''^ as it is indistinguishable 
from l-valent™"'"^ configuration D for all processes (and clones) in T. Therefore, we can find a 0 < 
j < I such that Era'Bj leads to a O-univalent™"''^ configuration and E^a'Bjj^i leads to a l-univalent™"''^ 
configuration. We let Cr+i be the configuration reached after E^+i = Era'Bj, and define R'^., R'g, V and 
L' as if Cr+i was bivalent in Case 2.1. This again works, and so does the claim about stale split pairs in 
Cr+i, but we have to construct P' and Q' with the desired properties. 

However, we can construct P' and Q' in a very similar way to Case 1.2. If o is the operation separating 
Bj and Bj^i, o may not be a read as before, and we again create two new duplicate process-clone pairs, 
both about to perform identical write operations o' and o". We let P' be a set of any m + 1 pairs and Q' be a 
set of m -|- 3 pairs with m -|- 1 pairs from T — P' and two new duplicate pairs. Then, by the same argument 
of Case 1.2, P' and Q' satisfy all required properties. 
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